I think some responsibility needs to be borne by those creating blatantly insecure systems. If I leave my garage door open and you come in and steal a server,

I think some responsibility needs to be borne by those creating blatantly insecure systems. If I leave my garage door open and you come in and steal a server, sure, that's illegal, but if, say, I lock my garage door, (or otherwise take reasonable precautions) you break a window, and then steal the same server, your penalty will be greater. depending on equipment on the consumer premises to be secure (especially if your system is so weak as to just look at the mac address.) sounds to me a lot like leaving the garage door open. I think this goes doubly for the banking systems; right now, all I need in order to hover all the money out of your bank account is your checking account number (and a merchant account) and your checking account number is on every cheque you write. That's a ridiculously insecure system, and sure, it should be illegal to exploit that, but I think the banks are 'leaving the garage door open' here - they bear responsibility for not taking reasonable precautions.